Ignore casing in CIDR wildcards

[InverseIntegral]

Problem

Trivy doesn't detect any problem in the following Terraform file:

resource "azurerm_network_security_group" "example" {
  security_rule {
    direction                  = "Inbound"
    access                     = "Allow"
    source_address_prefix      = "Internet"
  }
}

Changing it to this, however, results in a critical finding:

resource "azurerm_network_security_group" "example" {
  security_rule {
    direction                  = "Inbound"
    access                     = "Allow"
    source_address_prefix      = "internet"
  }
}

Note the different casing of the source_address_prefix.

Solution

I've adjusted the CIDR checks to include the wildcards regardless of their casing. internet and Internet should now be treated the same way.

[CLAassistant]

All committers have signed the CLA.

[nikpivkin]

LGTM